Implemented per-Space permissions for cloning.

Allows users to be assigned the ability to clone any content or own content only within a specific Space. This takes over the access control of og content entirely, so it also adds some new global Drupal permissions to set some permissions that affect ALL og content (whereas the old clone permissions only affect content that ISN'T in any og group).